Description
Session fixation vulnerability in Special:UserLogin in MediaWiki before 1.18.6, 1.19.x before 1.19.3, and 1.20.x before 1.20.1 allows remote attackers to hijack web sessions via the session_id.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2007-0273 Vulnerability (CVE-2007-0273)
EspoCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-32789)
Oracle Database Server CVE-2012-3146 Vulnerability (CVE-2012-3146)
WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)
WordPress 4.5.x Possible SQL Injection Vulnerability (4.5 - 4.5.10)